Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Cisco Web Security Appliance (WSA) — Vulnerabilities & Security Advisories 25

All 25 CVE vulnerabilities found in Cisco Web Security Appliance (WSA), with AI-generated Chinese analysis, references, and POCs.

This page documents known security weaknesses associated with the Cisco Web Security Appliance, categorized by their Common Weakness Enumeration types. It aggregates data from various public disclosures, internal analyses, and vendor advisories to provide a comprehensive view of the product's security posture over time. The collection includes vulnerabilities identified between 2010 and 2023, covering a wide spectrum of issues ranging from remote code execution and privilege escalation to information disclosure and cross-site scripting flaws. Users can explore detailed records of specific incident responses, analyze trends in vulnerability discovery, and understand how Cisco addresses these issues through its security update processes. This resource serves as a centralized reference for security analysts, system administrators, and researchers who need to assess risk, verify patch availability, or conduct historical security audits of Cisco WSA deployments. By presenting this information in an organized manner, the page facilitates deeper insights into the types of flaws that have affected the appliance and the evolution of its security mechanisms. It allows users to track the vendor’s advisory history, comprehend the broader implications of specific weakness classes on web security appliances, and review the timeline of vulnerability remediation efforts. The data is sourced from official Cisco Security Advisories, third-party security databases, and community-reported findings, ensuring a balanced and thorough perspective on the product’s security landscape.

Vendor: n/a

CVE IDTitleCVSSSeverityPublished
CVE-2023-20028 Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting Vulnerabilities CWE-79 5.4 Medium2023-06-28
CVE-2023-20120 Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting Vulnerabilities CWE-79 5.4 Medium2023-06-28
CVE-2022-20675 Multiple Cisco Security Products Simple Network Management Protocol Service Denial of Service Vulnerability CWE-248 5.3 Medium2022-04-06
CVE-2022-20781 Cisco Web Security Appliance Stored Cross-Site Scripting Vulnerability CWE-79 5.4 Medium2022-04-06
CVE-2022-20784 Cisco Web Security Appliance Filter Bypass Vulnerability CWE-20 5.8 Medium2022-04-06
CVE-2021-34698 Cisco Web Security Appliance Proxy Service Denial of Service Vulnerability CWE-401 8.6 High2021-10-06
CVE-2021-34749 Multiple Cisco Products Server Name Identification Data Exfiltration Vulnerability CWE-200 5.8 Medium2021-08-18
CVE-2021-1359 Cisco Web Security Appliance Privilege Escalation Vulnerability CWE-112 6.3 Medium2021-07-08
CVE-2021-1566 Cisco Email Security Appliance and Cisco Web Security Appliance Certificate Validation Vulnerability CWE-296 7.4 High2021-06-16
CVE-2021-1516 Cisco Content Security Management Appliance, Email Security Appliance, and Web Security Appliance Information Disclosure Vulnerability CWE-540 4.3 Medium2021-05-06
CVE-2021-1490 Cisco Web Security Appliance Cross-Site Scripting Vulnerability CWE-79 4.7 Medium2021-05-06
CVE-2021-1271 Cisco Web Security Appliance Stored Cross-Site Scripting Vulnerability CWE-79 4.8 Medium2021-01-20
CVE-2021-1129 Cisco Email Security Appliance, Cisco Content Security Management Appliance, and Cisco Web Security Appliance Information Disclosure Vulnerability CWE-201 5.3 Medium2021-01-20
CVE-2020-3367 Cisco Secure Web Appliance Privilege Escalation Vulnerability CWE-78 7.8 -2020-11-18
CVE-2019-15969 Cisco Web Security Appliance Management Interface Cross-Site Scripting Vulnerability CWE-79 6.1 -2020-09-23
CVE-2020-3117 Cisco Web Security Appliance and Cisco Content Security Management Appliance HTTP Header Injection Vulnerability CWE-113 4.7 -2020-09-23
CVE-2020-3547 Cisco Email Security Appliance, Cisco Content Security Management Appliance, and Cisco Web Security Appliance Information Disclosure Vulnerability CWE-200 4.3 Medium2020-09-04
CVE-2020-3164 Cisco ESA, Cisco WSA, and Cisco SMA GUI Denial of Service Vulnerability CWE-20 5.3 -2020-03-04
CVE-2019-15956 Cisco Web Security Appliance Unauthorized Device Reset Vulnerability CWE-284 8.8 -2019-11-26
CVE-2019-1884 Cisco Web Security Appliance Web Proxy Denial of Service Vulnerability CWE-20 6.5 -2019-07-04
CVE-2019-1886 Cisco Web Security Appliance HTTPS Certificate Denial of Service Vulnerability CWE-20 8.6 -2019-07-04
CVE-2019-1817 Cisco Web Security Appliance Malformed Request Denial of Service Vulnerability CWE-20 7.5 -2019-05-03
CVE-2019-1816 Cisco Web Security Appliance Privilege Escalation Vulnerability CWE-20 7.8 -2019-05-03
CVE-2019-1672 Cisco Web Security Appliance Decryption Policy Bypass Vulnerability CWE-400 5.3 -2019-02-08
CVE-2016-6469 Cisco AsyncOS for Cisco Web Security Appliance 拒绝服务漏洞 7.5 -2016-12-14

All 25 known CVE vulnerabilities affecting Cisco Web Security Appliance (WSA) with full Chinese analysis, references, and POCs where available.